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DETAILED ACTION 


Claim Objections 

Claim 42 is objected to because of the following informalities: The claim ends in 
5 a semicolon, all claims must end in a period. Appropriate correction is required. 


Claim Rejections - 35 USC § 101 

35 U.S.C. 101 reads as follows: 

Whoever invents or discovers any new and useful process, machine, manufacture, or composition of 
1 0 matter, or any new and useful improvement thereof, may obtain a patent therefor, subject to the 

conditions and requirements of this title. 

Claims 43,-48 are rejected under 35 U.S.C. 101 because the claimed invention is 
directed to non-statutory subject matter. The use of the word "signal" in the 
15 abovementioned claims implies a time-varying propagation medium which is by 
standard definition intangible. 

In accordance with Chapter 2106 of the MPEP, claimed inventions as a whole 
must accomplish a practical application. That is, they must produce "useful, concrete 
and tangible result[s]." State Street, 149 F.3d at 1373, 47 USPQ2d at 1601-02. 
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To expedite a complete examination of the instant application, the claims 
rejected under 35 USC 101 above are further rejected as set forth below in anticipation 
of applicant amending these claims to place them within the statutory classes of 
invention. 

5 

Claim Rejections - 35 USC § 102 

The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that 
form the basis for the rejections under this section made in this Office action: 

A person shall be entitled to a patent unless - 

1 0 (b) the invention was patented or described in a printed publication in this or a foreign country or in public 

use or on sale in this country, more than one year prior to the date of application for patent in the United 
States. 

Claims 1-48 are rejected under 35 U.S.C. 102(b) as being anticipated by Charles 
1 5 P. Pfleeger's Security in Computing. 

As per claim 1 , Pleeger discloses a method, comprising: 

receiving a request to present information selected from a plurality of examples 

of information (page 242 reference "file or data set" and "directory of files"); 
20 reading an identification token of at least one user; and determining whether said 

user is authorized to be presented said information (page 252 reference "Password or 

Other Token" and "Share Via Access Limitation"). 


As per claim 2, Pleeger discloses the method of claim 1 , further comprising: 
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suppressing a presentation of said information when said user is determined not 
to be authorized (page 264 reference "after a system detects an access violation 
attempt, the system might disconnect the user and suspend access"). 

5 As per claim 3, Pleeger discloses the method of claim 1 , further comprising: 

notifying a third party of said request (page 264 reference "security administrator 
clears the matter"; page 457 reference "Audit"). 

As per claim 4, Pfleeger discloses the method of claim 1 , further comprising: 
10 presenting an alternate example of information when said user is determined not 

to be authorized (page 263 reference "challenge-response interchange"). 

As per claim 5, Pfleeger discloses the method of claim 3, wherein said third party 
comprises one of a security officer ("security administrator"), a coworker, and a 
15 manager (page 264 reference "Authentication Other Than Passwords"; page 457 
reference "Audit"). 

As per claim 6, Pfleeger discloses the method of claim 1 , wherein said 
information includes at least one of a text file ("file or data set"), an image, a video file, 
20 an audio file, a notification, and a computer application ("program") (page 242 reference 
"Protecting Access to General Objects"). 
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As per claim 8, Pfleeger discloses the method of claim 1 , wherein said 
identification token comprises at least one of a biometric identification ("voice 
recognizers"), a fingerprint ("handprint detectors"), a retinal image ("identifiers of 
patterns in the retina"), and a bar code (page 264 reference "Authentication Other Than 
5 Passwords"). 

As per claim 9, Pfleeger discloses a method, comprising: 
making a computing application available on a plurality of computing systems 
(page 459 reference "Permissions"; page 265 reference "Share Facilities by Means of 
Computer Networks"); 

receiving a request to present said application on one of said computing systems 
(page 230 reference "Share Via Access Limitation"); 

reading an identification token of at least one user of said one of said computing 
systems; and determining whether said user is authorized to be presented said 
computing application (page 252 reference "Password or Other Token"). 

As per claim 10, Pfleeger discloses the method of claim 9, further comprising: 
determining whether said user is licensed to be presented said computing 
application (page 230 reference "Share Via Access Limitation"). 
20 


As per claim 1 1 , Pfleeger discloses the method of claim 9, further comprising: 
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suppressing a presentation of said application when said user is determined not 
to be authorized (page 264 reference "after a system detects an access violation 
attempt, the system might disconnect the user and suspend access"). 

5 As per claim 12, Pfleeger discloses the method of claim 9, further comprising: 

notifying a third party of the request (page 264 reference "security administrator 
clears the matter 1 '; page 457 reference "Audit" Administrator). 

As per claim 13, Pfleeger discloses the method of claim 9, wherein said 
10 application comprises one of a text processing program and an image processing 
program (page 242 reference "Protecting Access to General Objects"). 

As per claim 14, Pfleeger discloses the method of claim 9, further comprising: 
presenting an alternate application when said user is determined not to be 
15 authorized (page 263 reference "challenge-response interchange"). 

As per claim 15, Pfleeger discloses a method, comprising: 
presenting at least one information example selected from a plurality of examples 
of information (page 242 reference "file or data set" and "directory of files"; page 265 
20 reference "Share Facilities by Means of Computer Networks"); 
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reading an identification token of at least one user; and determining whether said 
user is authorized to be presented said at least one information example (page 252 
reference "Password or Other Token"). 

As per claim 16, Pfleeger discloses the method of claim 15, further comprising: 
terminating the presentation of said information example when said user is 
determined not to be authorized (page 264 reference "after a system detects an access 
violation attempt, the system might disconnect the user and suspend access"). 

As per claim 17, Pfleeger discloses the method of claim 15, further comprising: 
notifying a third party of the reading of said identification token (page 264 
reference "security administrator clears the matter"; page 457 reference "Audit"). 

As per claim 18, Pfleeger discloses the method of claim 16, further comprising: 
presenting an alternate example of information when said user is determined not 
to be authorized (page 263 reference "challenge-response interchange"). 

As per claim 21 , Pfleeger discloses a method, comprising: 
receiving a request to present information selected from a plurality of examples 
of information reading identification tokens from a plurality of users (page 242 reference 
"file or data set" and "directory of files"; page 265 reference "Share Facilities by Means 
of Computer Networks"); 
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determining whether any of said users are not authorized to be presented said 
information (page 252 reference "Password or Other Token"); and 

selectively suppressing a presentation of said information to said any of said 
users determined not to be authorized (page 264 reference "after a system detects an 
5 access violation attempt, the system might disconnect the user and suspend access"). 

As per claim 22, Pfleeger discloses the method of claim 21 , further comprising: 
notifying a third party of said request (page 264 reference "security administrator 
clears the matter"; page 457 reference "Audit"). 

10 

As per claim 23, Pfleeger discloses the method of claim 21 , further comprising: 
presenting an alternate example of information when said user is determined not 
to be authorized (page 263 reference "challenge-response interchange"). 

15 As per claim 24, Pfleeger discloses the method of claim 22, wherein said third 

party comprises one of a security officer ("security administrator"), a coworker, and a 
manager (page 264 reference "Authentication Other Than Passwords"; page 457 
reference "Audit" Administrator). 

20 As per claim 25, Pfleeger discloses the method of claim 21, wherein said 

information includes at least one of a text file ("file or data set"), an image, a video file, 
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an audio file, a notification, and a computer application ("program") (page 242 reference 
"Protecting Access to General Objects"). 

As per claim 27, Pfleeger discloses the method of claim 21, wherein said 
5 identification token comprises at least one of a biometric identification ("voice 
recognizers"), a fingerprint ("handprint detectors"), a retinal image ("identifiers of 
patterns in the retina"), and a bar code (page 264 reference "Authentication Other Than 
Passwords"). 


10 As per claim 28, Pfleeger discloses a method, comprising: 

receiving a request to present information selected from a plurality of examples 

of information (page 242 reference "file or data set" and "directory of files"); 

detecting a presence of a user and determining whether said user has an 

identification token that can be read (page 252 reference "Password or Other Token" 
1 5 and "Share Via Access Limitation"); and 

selectively suppressing a presentation of said information to any said user 

determined not to have said identification token which can be read (page 264 reference 

"after a system detects an access violation attempt, the system might disconnect the 

user and suspend access"). 

20 


As per claim 29, Pfleeger discloses the method of claim 28, further comprising: 
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after said detecting, attempting to read an identification token of said user (page 
252 reference "Password or Other Token"; page 264 reference "Authentication Other 
Than Passwords"). 

5 As per claim 30, Pfleeger discloses a system, comprising: 

a processor for receiving a request to present information selected from a 
plurality of examples of information (page 242 reference "file or data set" and "directory 
of files"; page 265 reference "Share Facilities by Means of Computer Networks"); 

a reader, coupled to said processor, for reading an identification token of at least 
10 one user; and a determining unit for determining whether said user is authorized to be 
presented said information (page 252 reference "Password or Other Token" and "Share 
Via Access Limitation") (see page 289 Figure 7-1 1b "Security Functions of Operating 
Systems") 


1 5 As per claim 31 , Pfleeger discloses the system of claim 30, wherein said 

processor selectively suppresses a presentation of said information when said user is 
determined not to be authorized (page 264 reference "after a system detects an access 
violation attempt, the system might disconnect the user and suspend access"). 


20 


As per claim 32, Pfleeger discloses the system of claim 30, further comprising: 
a notification unit for notifying a third party of said request (page 264 reference 
"security administrator clears the matter"; page 457 reference "Audit"). 
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As per claim 33, Pfleeger discloses the system of claim 30, wherein said 
processor presents an alternate example of information when said user is determined 
not to be authorized (page 263 reference "challenge-response interchange"). 

5 

As per claim 34, Pfleeger discloses the system of claim 32, wherein said third 
party comprises one of security officer ("security administrator"), a coworker, and a 
manager (page 264 reference "Authentication Other Than Passwords"; page 457 
reference "Audit" Administrator). 

10 

As per claim 35, Pfleeger discloses the system of claim 30, wherein said 
information includes at least one of a text file ("file or data set"), an image, a video file, 
an audio file, a notification, and a computer application ("program") (page 242 reference 
"Protecting Access to General Objects"). 

15 

As per claim 37, Pfleeger discloses the system of claim 30, wherein said 
identification token comprises at least one of biometric identification ("voice 
recognizers"), a fingerprint ("handprint detectors"), a retinal image ("identifiers of 
patterns in the retina"), and a bar code (page 264 reference "Authentication Other Than 
20 Passwords"). 
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As per claim 38, Pfleeger discloses a system (page 228 reference "general 
purpose operating system"), comprising: 

a processor for receiving a request to present an application on one of a plurality 
of computing systems, said computing application being available on said plurality of 
5 computing systems (page 242 reference "file or data set" and "directory of files"; page 
265 reference "Share Facilities by Means of Computer Networks"); 

a reader for reading an identification token of at least one user of said one of said 
computing systems; and a determining unit for determining whether said user is 
authorized to be presented said computing application (page 252 reference "Password 
1 0 or Other Token" and "Share Via Access Limitation"). 


As per claim 39, Pfleeger discloses a system, comprising: 

a display for presenting at least one information example selected from a plurality 
of examples of information (page 242 reference "file or data set" and "directory of files"; 
1 5 page 265 reference "Share Facilities by Means of Computer Networks"; page 289 
Figure 7-1 1 b reference user terminals); 

a reader for reading an identification token of at least one user; and a 
determining unit for determining whether said user is authorized to be presented said at 
least one information example (page 252 reference "Password or Other Token" and 
20 "Share Via Access Limitation"; page 289 Figure 7-1 1 b reference "User identification and 
Authentication"). 
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As per claim 40, Pfleeger discloses a system, comprising: 
a processor for receiving a request to present information selected from a 
plurality of examples of information (page 242 reference "file or data set" and "directory 
of files"; page 265 reference "Share Facilities by Means of Computer Networks"); 
5 a reader for reading identification tokens from a plurality of users; and a 

determining unit for determining whether any of said users are not authorized to be 
presented said information (page 252 reference "Password or Other Token" and "Share 
Via Access Limitation"; page 289 Figure 7-1 1b reference "User identification and 
Authentication"), 

10 said processor selectively suppressing a presentation of said information to said 

any of said users determined not to be authorized (page 264 reference "after a system 
detects an access violation attempt, the system might disconnect the user and suspend 
access"). 

15 As per claim 41 , Pfleeger discloses a system, comprising: 

a processor receiving a request to present information selected from a plurality of 
examples of information (page 242 reference "file or data set" and "directory of files"; 
page 265 reference "Share Facilities by Means of Computer Networks"); 

a detector for detecting a presence of a user; and a determining unit for 
20 determining whether said user has an identification token that can be read (page 252 
reference "Password or Other Token" and "Share Via Access Limitation"; page 289 
Figure 7-1 1b reference "User identification and Authentication"), 
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said processor selectively suppressing a presentation of said information to any 
said user determined not to have said identification token which can be read (page 264 
reference "after a system detects an access violation attempt, the system might 
disconnect the user and suspend access"). 

5 

As per claim 42, Pfleeger discloses the system of claim 41 , further comprising: 
a reader for attempting to read an identification token of said user (page 264 

reference "voice recognizers, handprint detectors, and identifiers of patterns in the 

retina"). 

10 

As per claim 43, Pfleeger discloses a medium tangibly embodying a program of 
machine-readable instructions executable by a digital processing apparatus to perform 
a method, said method comprising: 

receiving a request to present information selected from a plurality of examples 
15 of information (page 242 reference "file or data set" and "directory of files"; page 265 
reference "Share Facilities by Means of Computer Networks"); 

reading an identification token of at least one user; and determining whether said 
user is authorized to be presented said information (page 252 reference "Password or 
Other Token" and "Share Via Access Limitation"; page 289 Figure 7-1 1b reference 
20 "User identification and Authentication"). 
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As per claim 44, Pfleeger discloses a medium tangibly embodying a program of 
machine-readable instructions executable by a digital processing apparatus to perform 
a method, said method comprising: 

making a computing application available on a plurality of computing systems 
5 (page 265 reference "Share Facilities by Means of Computer Networks"); 

receiving a request to present said application on one of said computing systems 
(page 265 reference "Share Facilities by Means of Computer Networks"); 

reading an identification token of at least one user of said one of said computing 
systems; and determining whether said user is authorized to be presented said 
10 computing application (page 252 reference "Password or Other Token" and "Share Via 
Access Limitation"; page 289 Figure 7-1 1b reference "User identification and 
Authentication"). 

As per claim 45, Pfleeger discloses a medium tangibly embodying a program of 
15 machine-readable instructions executable by a digital processing apparatus to perform 
a method, said method comprising: 

presenting at least one information example selected from a plurality of examples 
of information (page 242 reference "file or data set" and "directory of files"; page 265 
reference "Share Facilities by Means of Computer Networks"); 
20 reading an identification token of at least one user; and determining whether said 

user is authorized to be presented said at least one information example (page 252 


Application/Control Number: 09/928,428 Page 16 

Art Unit: 2137 

reference "Password or Other Token" and "Share Via Access Limitation"; page 289 
Figure 7-1 1b reference "User identification and Authentication"). 

As per claim 46, Pfleeger discloses a medium tangibly embodying a program of 
5 machine-readable instructions executable by a digital processing apparatus to perform 
a method, said method comprising: 

receiving a request to present information selected from a plurality of examples 
of information (page 242 reference "file or data set" and "directory of files"; page 265 
reference "Share Facilities by Means of Computer Networks"); 
10 reading identification tokens from a plurality of users; determining whether any of 

said users are not authorized to be presented said information (page 252 reference 
"Password or Other Token" and "Share Via Access Limitation"; page 289 Figure 7-1 1b 
reference "User identification and Authentication"); and 

selectively suppressing a presentation of said information to said any of said 
1 5 users determined not to be authorized (page 264 reference "after a system detects an 
access violation attempt, the system might disconnect the user and suspend access"). 


20 


As per claim 47, Pfleeger discloses a medium tangibly embodying a program of 
machine-readable instructions executable by a digital processing apparatus to perform 
a method, said method comprising: 
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receiving a request to present information selected from a plurality of examples 
of information (page 242 reference "file or data set" and "directory of files"; page 265 
reference "Share Facilities by Means of Computer Networks"); 

detecting a presence of a user; determining whether said user has an 
5 identification token that can be read (page 252 reference "Password or Other Token" 
and "Share Via Access Limitation"; page 289 Figure 7-1 1b reference "User identification 
and Authentication"); and 

selectively suppressing a presentation of said information to any said user 
determined not to have said identification token which can be read (page 264 reference 
1 0 "after a system detects an access violation attempt, the system might disconnect the 
user and suspend access"). 

As per claim 48, Pfleeger discloses the medium of claim 47, wherein said method 
further comprises: 

15 attempting to read an identification token of said user (page 252 reference 

"Password or Other Token" and "Share Via Access Limitation"; page 289 Figure 7-1 1b 
reference "User identification and Authentication"). 

Claim Rejections - 35 USC § 103 

20 The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 

obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
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invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

5 Claims 19 and 20 are rejected under 35 U.S.C. 103(a) as being unpatentable 

over Pfleeger as applied to claims 1-6, 8-18, 21-25, 27-35, and 37-48 above, and further 
in view of Friday, Wu, Schmid, Finney, Cheverst and Davies' A Wireless Public Access 
Infrastructure for Supporting Mobile Context-Aware IPv6 Applications hereinafter 
referred to as Friday. 

10 

As per claim 19, Pfleeger discloses the method of claim 15. 

Pfleeger fails to disclose the method of claim 1 5, further comprising presenting 
said information example on an alternate user interface device. 

Friday discloses the method of claim 15, further comprising presenting said 
15 information example on an alternate user interface device such as the CyberGuide 
(page 1 1 column 1) and other personal computing devices such as laptops, PDAs and 
cellphones (page 1 1 column 2). 

It would have been obvious to a person of average skill in the area at the time of 
the invention to include within Pfleeger's System and Method for Managing the 
20 Presentation of Information, the wireless personal computing devices as described in 
Friday to provide increased mobility for users: 

As per claim 20, the combined method of Pfleeger and Friday disclose the 
method of claim 19, wherein said alternate information device comprises one of a 
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personal digital assistant (PDA), a portable personal computer, a wireless device, a 
cellular phone, and a limited-access display (Friday page 11). 

It would have been obvious to a person of average skill in the area at the time of 
the invention to include within Pfleeger's System and Method for Managing the 
5 Presentation of Information, the wireless personal computing devices as described in 
Friday to provide increased mobility for users. 

Claims 7, 26, and 36 are rejected under 35 U.S.C. 103(a) as being unpatentable 
over Pfleeger as applied to claims 1-6, 8-18, 21-25, 27-35, and 37-48 above, and further 
1 0 in view of Carl Landwehr's Protecting Unattended Computers Without Software. 

As per claim 7, Pfleeger discloses the method of claim 1 , wherein said 
identification token comprises a wireless identification token comprising at least one of a 
radio frequency identification tag, a wireless radio communications device, a Bluetooth 

15 device, 5 an IEEE 802.1 1 device, and an active badge. 

Pfleeger fails to disclose the method of claim 1 , wherein the identification token 
comprises a wireless identification token comprising at least one of a radio frequency 
identification tag, a wireless radio communications device, a Bluetooth device, 5 an 
IEEE 802.11 device, and an active badge. 

20 Landwehr discloses the method of claim 1 , wherein the identification token 

comprises tokens that can be sensed without the need for physical contact, such as 
Radio Frequency (RF) identification tags as well as other wireless tokens (column 3 
lines 10-46). 
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It would have been obvious to a person of average skill in the area at the time of 
the invention to include within Pfleeger's System and Method for Managing the 
Presentation of Information, the wireless identification tokens as described in Landwehr 
to provide increased security for users. 

5 

As per claim 26, Pfleeger discloses the method of claim 21 , wherein said 
identification token comprises a wireless identification token comprising at least one of a 
radio frequency identification tag, a wireless radio communications device, a Bluetooth 
device, 5 an IEEE 802.1 1 device, and an active badge. 

1 0 Pfleeger fails to disclose the method of claim 1 , wherein the identification token 

comprises a wireless identification token comprising at least one of a radio frequency 
identification tag, a wireless radio communications device, a Bluetooth device, 5 an 
IEEE 802.11 device, and an active badge. 

Landwehr discloses the method of claim 1 , wherein the identification token 

1 5 comprises tokens that can be sensed without the need for physical contact, such as 
Radio Frequency (RF) identification tags as well as other wireless tokens (column 3 
lines 10-46). 

It would have been obvious to a person of average skill in the area at the time of 
the invention to include within Pfleeger's System and Method for Managing the 
20 Presentation of Information, the wireless identification tokens as described in Landwehr 
to provide increased security for users. 
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As per claim 36, Pfleeger discloses the system of claim 30, wherein said 
identification token comprises a wireless identification token comprising at least one of a 
radio frequency identification tag, a wireless radio communications device, a Bluetooth 
device, 5 an IEEE 802.11 device, and an active badge. 
5 Pfleeger fails to disclose the method of claim 1 , wherein the identification token 

comprises a wireless identification token comprising at least one of a radio frequency 
identification tag, a wireless radio communications device, a Bluetooth device, 5 an 
IEEE 802.11 device, and an active badge. 

Landwehr discloses the method of claim 1 , wherein the identification token 
10 comprises tokens that can be sensed without the need for physical contact, such as 
Radio Frequency (RF) identification tags as well as other wireless tokens (column 3 
lines 10-46). 

It would have been obvious to a person of average skill in the area at the time of 
the invention to include within Pfleeger's System and Method for Managing the 
15 Presentation of Information, the wireless identification tokens as described in Landwehr 
to provide increased security for users. 

Conclusion 

Any inquiry concerning this communication or earlier communications from the 
20 examiner should be directed to Tamara Teslovich whose telephone number is (571) 
272-4241. The examiner can normally be reached on Mon-Fri 8-4:30. 
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If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Andrew Caldwell can be reached on (571) 272-3868. The fax phone 
number for the organization where this application or proceeding is assigned is 703- 
872-9306. 

5 Information regarding the status of an application may be obtained from the 

Patent Application Information Retrieval (PAIR) system. Status information for 
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Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
10 you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). 
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